Exposure of Socket.io

JavaScript frameworks

18

exposure score

24,667

sites use

0

exploited

0

critical

CVEs

6 results

CVE-2020-28481MEDIUMInsecure DefaultsEPSS 0.7%CVE-2024-38355HIGHUnhandled 'error' event in socket.ioEPSS 0.7%CVE-2026-33151HIGHsocket.io allows an unbounded number of binary attachmentsEPSS 0.5%CVE-2026-59725HIGHSocket.IO: Engine.IO Polling Transport Connection ExhaustionEPSS 0.4%CVE-2026-69185HIGHSocket.IO: Zero-attachment Memory ExhaustionEPSS 0.3%CVE-2026-59724HIGHSocket.IO: Engine.IO WebTransport SID DoSEPSS 0.3%